0
(0)

 Important

The improved Microsoft 365 Defender portal is now available. This new experience brings Defender for Endpoint, Defender for Office 365, Microsoft 365 Defender, and more into the Microsoft 365 Defender portal. Learn what’s new.

Applies to:

 Important

Some information relates to prereleased product which may be substantially modified before it’s commercially released. Microsoft makes no warranties, express or implied, with respect to the information provided here.

Microsoft Threat Experts – Targeted Attack Notifications is a managed threat hunting service. Once you apply and are accepted, you’ll receive targeted attack notifications from Microsoft threat experts, so you won’t miss critical threats to your environment. These notifications will help you protect your organization’s endpoints, email, and identities. Microsoft Threat Experts – Experts on Demand lets you get expert advice about threats your organization is facing. You can reach out for help on threats your organization is facing. It’s available as a subscription service.

Apply for Microsoft Threat Experts – Targeted Attack Notifications

 Important

Before you apply, make sure to discuss the eligibility requirements for Microsoft Threat Experts – Targeted Attack Notifications with your Microsoft Technical Service provider and account team.

If you already have Microsoft Defender for Endpoint and Microsoft 365 Defender, you can apply for Microsoft Threat Experts – Targeted Attack Notifications through their Microsoft 365 Defender portal. Go to Settings > Endpoints > General > Advanced features > Microsoft Threat Experts – Targeted Attack Notifications, and select Apply. See Configure Microsoft Threat Experts capabilities for a full description.

Screenshot of MTE application page.

Once your application is approved, you’ll start receiving targeted attack notifications whenever Threat Experts detect a threat to your environment.

Subscribe to Microsoft Threat Experts – Experts on Demand

Contact your Microsoft representative to subscribe to Experts on Demand. See Configure Microsoft Threat Experts capabilities for full details.

Receive targeted attack notification

The Microsoft Threat Experts – Targeted Attack Notification capability provides proactive hunting for the most important threats to your network. Our threat experts hunt for human adversary intrusions, hands-on-keyboard attacks, and advanced attacks, such as cyberespionage. These notifications will show up as a new alert. The managed hunting service includes:

  • Threat monitoring and analysis, reducing dwell time and the risk to your business
  • Hunter-trained artificial intelligence to discover and target both known attacks and emerging threats
  • Identification of the most pertinent risks, helping SOCs maximize their effectiveness
  • Help scoping compromises and providing as much context as can be quickly delivered to enable a swift SOC response.

Collaborate with experts on demand

You can also contact Microsoft threat experts from directly inside the Microsoft 365 security portal, for a swift and accurate threat response. Experts can provide insight to better understand the complex threats your organization may face. Consult an expert to:

  • Gather additional information on alerts and incidents, including root causes and scope
  • Gain clarity into suspicious devices, alerts, or incidents and get next steps if faced with an advanced attacker
  • Determine risks and available protections related to threat actors, campaigns, or emerging attacker techniques

The option to Consult a threat expert is available in several places throughout the portal:

  • Device page actions menu
    Screenshot of MTE-EOD menu option in the Device page action menu.
  • Device inventory page flyout menu
    Screenshot of MTE-EOD menu option on the device inventory page.
  • Alerts page flyout menu
    Screenshot of MTE-EOD menu option on the alert page.
  • Incidents page actions menu
    Screenshot of MTE-EOD menu option on the incidents page.
  • Incidents inventory page
    Screenshot of MTE-EOD menu option on the incidents inventory page.

 Note

If you have Premier Support subscription mapped to your Microsoft Defender for Office 365 license, you can track the status of your Experts on Demand cases through Microsoft Services Hub.

Watch this video for a quick overview of the Microsoft Services Hub.

Source : Official Microsoft Brand
Editor by : BEST Antivirus KBS Team

How useful was this post?

Click on a star to rate it!

Average rating 0 / 5. Vote count: 0

No votes so far! Be the first to rate this post.